logo

Warning: Poorly Secured Linux SSH Servers Under Attack for Cryptocurrency Mining

ID: 1bb6be96-b1dc-592d-a6da-1caf6d8b2ce4

STIX ID: report--1bb6be96-b1dc-592d-a6da-1caf6d8b2ce4

Feed Name: The Hacker News

Threat Score
65/100

Date Published: 2023-12-27

Date Updated: 2026-04-23

Author: [email protected] (The Hacker News)

...
...

AhnLab/ASEC warns that attackers are brute-forcing SSH on poorly secured Linux servers to install port scanners and dictionary-attack tools which scan for additional vulnerable hosts and propagate infections; compromised machines are used for cryptocurrency mining, DDoS, or selling credentials. The report highlights simple reconnaissance commands (e.g., checking CPU cores via /proc/cpuinfo), ties to known tooling dating back to 2021, and recommends strong, rotated passwords and timely patching.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.